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(54) Electronic settlement system using separate communication channels for settlement 
between sales and payee terminals 



(57) In an electronic settlement system, a local link 
is established between a sales terminal and a payee ter- 
minal. The sales terminal transmits settlement informa- 
tion including payment data to the payee terminal, and 
establishes a first communication channel to a settle- , 
ment center in response to receipt of a payee-terminal 
identifier identifying the payee terminal and transmits a 
first signal containing the settlement information and the 
identifier to the settlement center. The payee terminal 



transmits the payee-terminal identifier to the sales ter- 
minal when a password is entered thereto after the pay- 
ee terminal has received the settlement information, es- 
tablishes a second communication channel to the set- 
tlement center and transmits the password and a sec- ; 
pnd signal containing the settlement information and the 
payee-terminal identifier to the settlement center. The 
settlement center performs a settlement process if the 
password is a registered password and the first and sec- 
ond signals are identical to each other. 
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Description 

BACKGROUND OF THE INVENTION 
Field of the Invention 

[0001] The present invention relates to an electronic 
settlement system. The present invention is particularly 
concerned with a technique for ensuring high level of 
security against possible illegal attempts. 

Description of the Related Art 

[0002] Recent commercial transactions use not only 
cashless transactions such as credit cards but electron- 
ic transactions by transmission of settlement data for 
making the payment for a commercial product or service 
rendered to consumers. In a card settlement system or 
in an electronic settlement system, a merchant shop is 
provided with a computer terminal supplied from the set- 
tlement company. When a customer makes a purchase 
in the merchant shop, the personal information of the 
customer necessary for his verification is transmitted 
from the computer terminal to the settlement center of 
the company. The settlement center examines the re- 
ceived verification information and checks to see if the 
customer can make the payment of the purchased item 
and sends the result of the check to the computer ter- 
minal of the merchant shop, in the card settlement sys- 
tem, the customer hands over his credit card containing 
his personal verification information to a merchant. He 
needs to permit his personal information to be read into 
the merchant's computer, thus causing it to be laid open 
to the knowledge of the merchant. In the electronic set- 
tlement system, the customer needs to inform the mer- 
chant of his personal information. These systems work 
when the relationship between the customer and the 
merchant is based on mutual trust. Therefore, the secu- 
rity level of these systems is not satisfactory. 
[0003] Many attempts have been made to improve the 
security level of such systems. For example, Japanese 
Patent Publication 11-45366 titled "individual confirma- 
tion system" discloses an authentication system in 
which customers carry a mobile communication termi- 
nal to allow his personal information to be directly ac- 
cessed from a settlement center. This electronic settle- 
ment system includes a settlement center owned and 
operated by a settlement company to provide manage- 
ment of information necessary for a settlement process 
to proceed between subscribed customers and mer- 
chants. The system further includes a sales terminal in 
a merchant shop for authentication of customers* per- 
sonal information. The phone number of the mobile 
communication terminal is stored in a memory. Settle- 
ment center 10 stores customers' phone numbers and 
passwords of mobile terminals and establishes commu- 
nication to each mobile communication terminal via a 
wireless communication channel. In addition, the settle- 



ment center and a sales terminal exchanges information 
necessary for authentication through a wire-line com- 
munication channel. When a customer makes a pur- 
chase in a merchant shop, this electronic settlement 

5 system informs the sales terminal at the merchant shop 
of the customer's phone number. This is achieved by 
connecting the mobile communication terminal to the 
sales terminal and reading the stored phone number. 
The phone number is then transmitted to the settlement 

10 center via a wire-line communication channel. The set- 
tlement center establishes a dial-up connection to the 
mobile communication terminal to urge the customer to 
enter a password to the mobile communication terminal. 
On receiving the password 16, the settlement center 1 0 

15 compares it against a library of passwords that are 
mapped to the phone numbers of subscribed customers 
for coincidence and informs the sales terminafcof the re- 
sult of the check. According to the check result, if the 
sales terminal verifies that the purchaser is the genuine 

20 owner of the mobile communication terminal, it urges 
the purchaser to effect the payment of the purchase. 
When the payment is made, payment data is transmitted 
to* the settlement center. In this way, the password of a 
purchaser is transmitted to the settlement center with out 

25 leaving the password open to the knowledge of the mer- 
chant. The level of security can be enhanced in this way. 
[0004] However, the security level of the prior art elec- 
tronic settlement system as disclosed in the aforesaid 
Japanese Patent Publication is still not sufficiently high 

30 since the customer's property will be engendered if the 
purchaser's personal information is illegally used by a 
merchant. 

[0005] First, the need to read the phone number of a 
purchaser into a merchant's sales terminal would tempt 

35 a malicious merchant to make a willful false purchase 
by illegally using the stored phone number as if the pur- 
chase has been made by the owner of the phone 
number. Settlement does not occur in so far as the pur- 
chaser has not entered his own password into his mobile 

40 communication terminal. However, if such a false pur- 
chase occurs during the time the owner of the phone 
number is conducting a transaction with a different mer- 
chant, the settlement center would proceed with the set- 
tlement of the false purchase. 

45 [0006] Second, since payment data to be sent to the 
settlement center is supplied only from a merchants 
sales terminal and since this data input occurs after the 
purchaser is authenticated, the merchant has a chance 
to revise the payment data. In addition, a malicious mer- 

so chant would behave in the presence of the purchaser 
as if settlement were lawfully processed and then after 
the purchaser has left the merchant shop, the merchant 
has a chance to revise the payment data. 
[0007] Third, since it is necessary for the merchant to 

55 access the purchaser's mobile communication terminal 
to request the purchaser to enter his own password be- 
fore proceeding with settlement as described above, the 
purchaser's phone number must be open to the mer- 
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'chant. Because of this openness and the fact, that the 
time a. settlement has been completecl is not precisely 
clear, a malicious merchant would be tempted to make 
a false phone call to the purchaser by addressing him- 
self as a settlement center personnel and illegally ob- 
tains his password. 

[0008] In addition, the electronic settlement system as 
disclosed in Japanese Patent Publication 9^54808 re- 
quires that purchaser's personal data be processed by 
special software for electronic signature and cryptic 
communication. The amount of data will increase due 
to the redundant bits necessary for ciphering the impor- 
tant information. In particular, a mobile communication 
terminal in the Wireless Application Protocol (WAP) sys- 
tem requires a browser function necessary to display 
contents described in a particular information descrip- 
tion language in order to acquire information from an in- 
ternet server. Further, the size of mobile communication 
terminals must be small and have less weight as possi- 
ble. Accordingly, there is a need for an electronic settle- 
ment system which is not required to use complex soft- 
ware while ensuring high level of security. 

SUMMARY OF THE INVENTION 

[0009] It is therefore an object of the present invention 
to provide a settlement system and method that ensures 
high level of security for important personal information. 
[0010] According to a first aspect, the present inven- 
tion provides an electronic settlement system compris^ 
ing a sales terminal, a payee terminal for establishing a 
local link to the sales terminal/and a settlement center. 
The sales terminal transmits settlement information in- 
cluding payment data to the payee terminal via the local 
link, and establishes a first communication channel to 
the settlement center in response to receipt of an iden- 
tifier identifying the payee terminal and transmitting a 
first signal containing the settlement information and the 
identifier to the settlement center. The payee terminal 
transmits its own identifier to the sales terminal via the 
local link when a password is entered to the payee ter- 
minal after the payee terminal has received the settle- 
ment information, establishes a second communication 
channel to the settlement center and transmits the pass- 
word and a second signal containing the settlement in- 
formation and the identifier to the settlement center. The 
settlement center performs a settlement process if the 
password is a registered password and the first and sec- 
ond signals are identical to each other. 
[0011] Preferably, the payee terminal is a wireless 
personal communication device for establishing the 
second communication channel via a mobile communi- 
cation network. 

[0012] According to a second aspect, the present in- 
vention provides a settlement method for a system com- 
prised of a sales terminal, a payee terminal and a set- 
tlement center. The method comprises the steps of (a) 
establishing a local link between the sales terminal and 



the payee terminal, (b) transmitting settlement informa- 
tion including payment data from the sales terminal to ; 
the payee terminal via the local link, (c) transmitting an ^ 
identifier identifying the payee terminal from the payee 

5 terminal to the sales terminal via the local link when a .. 
password is entered to the payee terminal after the pay- 
ee terminal has received the settlement information, (d) 
establishing a first communication channel from the 
sales terminal to the settlement center in response to 

10 receipt of the identifier and transmitting a first signal con- 
taining the settlement information and the identifier to 
the settlement center, (e) establishing a second com- 
munication channel from the payee terminal to the set- 
tlement center in response to entry of the password and 

is transmitting the password and a second signal contain- 
ing the settlement information and the identifier to the 
settlement center, and (0 receiving, at the settlement 
center, the first signal from the sales terminal jind the 
password and the second signal from the payee termi- 

20 nal, and performing a settlement process if the pass- 
word is a registered password and the first and second 
signals are identical to each other. 

BRIEF DESCRIPTION OF THE DRAWINGS 

25 

[0013] The present invention will be described in fur- 
ther detail with reference to the accompanying draw- 
ings, in which: 

30 Fig. 1 is a block diagram of an electronic settlement 
system according to one embodiment of the present 
invention; 

Fig. 2 is a block diagram of an electronic settlement 
system according to a modified embodiment of the 

35 present invention; 

Figs. 3A, 3B and 3C are schematic diagrams for il- 
lustrating successive communication modes of the 
operation of the electronic settlement system of the 
present invention; 

40 Figs. 4A, 4B and 4C are flowcharts of the operation 
of the sales terminal of the present invention; 
Figs. 5A, 5B and 5C are flowcharts of the operation, 
of the payee terminal of the present invention; 
Figs. 6A, 6B and 6C are flowcharts of the operation 

45 of the settlement center of the present invention; 
and 

Fig. 7 is a flowchart of a modified mode of operation 
of the settlement center. 

so DETAILED DESCRIPTION 

[0014] Referring nowto Fig. 1 , there is shown an elec? 
tronic settlement system according to the present inven- 
tion. The system is comprised of a settlement center 20, 
55 a sates terminal 21 having a female connector 21 A, and 
a wireless payee terminal 22 such as a mobile tele- 
phone, preferably a digital cellular mobile telephone. 
Settlement center 20 is connected to a public switched 
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telephone network 23 and the sales terminal 21 is con- 
nected to the network 23 via a subscriber line 32. Payee 
terminal 22 is a subscriber station of a mobile telephone 
network 24 which forms a combined communications 
network with the PSTN 23. 

[0015] Wireless payee terminal 22 is provided with a 
male connector 22A which is detachably coupled with 
the female connector 21 A of sales terminal 21 to estab- 
lish a two-way communication channel 33. Alternatively, 
a beam of radiation such as infrared light is used as the 
communication channel 33. In such instances, the wire- 
less payee terminal 22 is provided with an infrared-light 
emitter and the sales terminal 21 is provided with an in- 
frared light detector. During use, the payee terminal 22 
may be positioned in a hoiderto project its infrared light 
beam onto the infrared light detector on the sales termi- 
nal 21 . 

[0016] Wireless payee terminal 22 is preferably pro- 
vided with two wireless units. The first unit is used for 
establishing a wireless channel 34 on a first frequency 
to the mobile telephone network 24 and the other unit is 
used for establishing an alternate wireless channel 35 
on a second frequency in the event that the first unit fails 
to establish the channel 34 within a prescribed time in- 
terval possibly due to lack of network resource on the 
first frequency 

[001 71 Settlement center 20 is a computer terminal 
which is connected via subscriber lines 30 and 31 to the 
switched telephone network 23 and provided with a 
mapping table 25Tin which a plurality of passwords are 
mapped to a plurality of payee-terminal identifiers 
(PIDs). As an option, a plurality of phone numbers are 
mapped to a plurality of PIDs in a mapping table 26 to 
increase the security level of the electronic settlement 
system. Settlement center 20 is also connected to a 
commercial bank 27 for performing a settlement proc- 
ess between purchasers' bank accounts and the mer- 
chant's bank account. 

[0018] Although the payee terminal is preferably a 
wireless terminal, a hand-held personal communication 
device such as a personal digital assistant (PDA) can 
also be used as a payee terminal as shown in Fig. 2. In 
this case, the payee terminal 28 has an additional male 
connector 28A which engages a female connector 36A 
of a subscriber line 36 which terminates at a subscriber 
line port of the PSTN 23. Further, the payee terminal 28 
has a dialling function for setting up a call to the PSTN 
23. 

[001 9] The sales and payee terminals operate in three 
successive modes as illustrated in Figs. 3 A, 3B and 3C, 
respectively. 

[0020] In the first mode (Fig. 3A) 5 the sales terminal 
21 sends information including payment data, sales-ter- 
minal identifier (SID) and a transaction identifier (TID to 
the payment terminal through the communication chan- 
nel 33 and the payee terminal sends its payee-terminal 
identifier (PID) to the sales terminal 21 , so that these 
terminals share the same items of information neces- 



sary for the settlement center 20 to verify the payee ter- 
minal 22. 

[0021] In the second mode (Fig. 3B), the sales and 
payee terminals establish individual communication 

5 channels 41 and 42 via networks 23 and 24 to the set- 
tlement center 20 for transmitting the shared information 
from the sales terminal 21 and the shared information 
plus a password from the payee terminal 22. As an op- 
tion, the payee terminal transmits its phone number to 

10 the settlement center 20 for further increasing the level 
of security. When the payee terminal 22 is authenticat- 
ed, the settlement center 20 transfers payment from the 
purchaser's bank account to the merchant's bank ac- 
count and sends back a settlement complete message 

15 (SCM) to both terminals indicating that a settlement 
transaction is successfully completed. 
[0022] In the third mode (Fig. 3C), the sale&4erminal 
21 informs the payee terminal 22 through the commu- 
nication channel 33 of the fact that it has received a set- 

20 tlement complete message from the center for asking 
the payee terminal if it has also received the same mes- 
sage from the settlement center 20. This is achieved by 
sending a message identifier (MID) from the sales ter- 
minal to the payee terminal. 

25 [0023] When a customer makes a purchase in a mer- 
chant's sales site and approaches the sales terminal 21 . 
The customer connects a payee terminal 22 (or 28) to 
the sales terminal 21 to establish the communication link 
33. A sales person enters the payment value to be paid 

30 by the purchaser into the sales terminal 21 . 

[0024] The operation of the sales terminal 21 pro- 
ceeds according to the flowcharts of Figs. 4A, 4B and 
AC. 

[0025] In Fig. 4A, the routine begins with the entry of 

35 the payment data at step 1 01 . The entered payment da- 
ta is displayed on the sales terminal 21 (step 102) and 
the sales terminal 21 starts a session with the payee 
terminal 22 or 28 by exchanging protocols (step 103). 
In this process, sales terminal 21 may inform the payee 

40 terminal of the phone number of settlement center 20. 
Sales terminal 21 starts sending a series of settlement 
data to the payee terminal over the communication link 
33, including the payment data, the sales-terminal iden- 
tifier (SID) of the sales terminal 21, and a transaction 

45 identifier (TID) identifying the current transaction, and 
then receives the payee-terminal identifier (PID) of the 
payee terminal. Each data transmission subroutine, 
transmission of data requires the transmitting terminal 
to hold a copy of the transmitted data and the receiving 

50 terminal to return a copy of the received data, or "echo- 
to the transmitting terminal to enable it to determine the 
equality of the received echo to the copy of the trans- 
mitted data. If they are equal, the transmitting terminal 
recognizes that the transmitted data is properly received 

55 by the receiving terminal. 

[0026] Following the execution of step 1 03, the sales 
terminal 21 successively performs data transmission 
subroutines 104, 105 and 107 for the transmission of 
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'payment data, SID and TID to the payee temiinal. 
[0027] Specifically, during subroutine 104 the sales 
terminal 21 sends the payment data to the payee termi- 
nal (step 104A), receives a payment echo (step 104B) 
and checks for equality to the payment data (step 1 04C). 
If they are not equal to each other, flow returns from step 
1 04C to step 1 04A to retransmit the payment data. Dur- 
ing subroutine 105 the sales terminal 21 transmits its 
sales-terminal identifier (SID) to the payment terminal 
(step 1 05A), and receives an SID echo (step 1 05B) and 
tests for its equality to the SID (step 1 05C). If the SID is 
successfully transmitted, the sales terminal 21 assigns 
a transaction identifier (TID) to the current transaction 
(step 106) and starts TID transmission subroutine 107 
in which it transmits the TID to the payment terminal 
(step 107A), receives a TID echo (step 107B) and tests 
for its equality to the TID (step 106G). 
[0028] If the TID is successfully transmitted, the sales 
terminal 21 performs reception subroutine 108 (see Fig. 
4B) in which it receives a payee -terminal identifier (PID) 
from the payee terminal (step 1 08 A), sends a PID echo 
back to the payee terminal ! 08B and awaits a pre- 
scribed time interval to determine if a PID is received 
again within that time interval (step 108C). If the sales 
terminal 21 receives a PID again, it determines that 
there is a mismatch between the previous PID and its 
echo, and returns to step 108B to retransmit a PID echo 
to the payee terminal. Steps 108B and 108.C will be re- 
peated until the sales terminal determines that it no long- 
er receives a PID after transmission of a PID echo, v 
[0029] When both sales and payee terminals and 
have shared the same PID information, the decision at 
step 108C is negative and the sales terminal proceeds 
to step 109 to terminate the session with the payee ter- 
minal. 

[0030] At step 110, the sales terminal establishes a 
connection to the settlement center 20 via the PSTN 23 
and starts a session by exchanging protocols with the 
center. In this session, the sales terminal successively 
performs data transmission subroutines 111, 112, 113 
(Fig. 4B) and 114 (Fig. 4C) for the transmission of SID, 
TID, PID and payment data to the settlement center 20. 
[0031] Specifically, during SID transmission subrou- 
tine 111 the sates terminal sends its sales-terminal iden- 
tifier (step 111 A), receives an SID echo from the settle- 
ment center (step 111 B) and checks for a match be- 
tween the SID and the received echo (step 111 C). If the 
SID is successfully transmitted, TID transmission sub- 
routine 112 is executed in which the transaction identi- 
fier is sent to the center (step 112A) and a TID echo is 
received from the center (step 112B) and checked for a 
match with the TID (step 112C). After successful trans- 
mission of the TID, PID transmission subroutine 113 is 
executed in which the payee-terminal identifier is sent 
to the center (step 113A) and a PID echo is received 
therefrom (step 1 1 3B) and checked for coincidence with 
the PID (step 11 3C). During data transmission subrou- 
tine 114 (see Fig. 4C), the sales terminal transmits the 



payment data to the center (step 114A) and receives a 
. PID echo (step 114B) and checks for coincidence with 
the payment data (step 114C). 

[0032] Settlement center 20 will receive a password 

5 from the payee terminal plus the same items of informa- 
tion as those received from the sales terminal 21 and 
verifies the received data for authenticating the payee 
terminal. If the received data are verified, the settlement 
center 20 proceeds to settle the payment and sends a 

10 settlement complete message to both terminals 21 and 

•-=■ 22 (or 28). 

[0033] At step 1 1 5 (Fig. 4C), the sales terminal 21 re- 
. ceives the settlement complete message from the cent- 
er 20 and release the connection to the center (step 116) 

is and restarts a session with the payee termi nal (step 117) 
to perform transmission subroutine 118. 
[0034] In subroutine 118, the sales terminal £4 trans- 
mits a message identifier (fVUD) to the payee-terminal 
22 (step 118A), identifying the settlement complete 

20 message, receives an MID echo (step 11 8B) and checks 
for equality to the MID (step 118C). It the decision at 
step 118C is affirmative, the sales terminal determines 
that the payee terminal has also received the same set- 
tlement complete message from the center 20 as those 

25 the sales terminal has received from the center and pro- 
ceeds to step 1 1 9 to terminate the session with the pay- 
ee temiinal. 

[0035] The operation of the payee terminal will be de- 
scribed with reference to the flowcharts of Figs. 5 A, 5B 

30 and 5C by assuming that the terminal 22 is a wireless 
terminal having working and standby units for establish- 
ing a wireless link to the mobile telephone network 24. 
[0036] In Fig. 5A, the payee terminal 22 starts a ses- 
sion with the sales terminal 21 via the communication 

35 channel 33 (step 201). The payee terminal starts receiv- 
ing the payment data, SID and TID information from the 
sales terminal 21 in successive data reception subrou- 
tines 202, 203 and 204. 

[0037] Specifically, during payment data reception 
40 subroutine 202, the payee terminal receives the pay- 
ment data (step 202A), returns a payment echo to the 
sales temiinal (step 202B) and awaits a prescribed in- 
terval to check for the reception of payment data again 
(step 202C) to repeat the transmission of a payment 
45 echo if payment data is received again. During SID re- 
ception subroutine 203, the payee terminal receives a 
sales-terminal identifier (step 203A), returns an SID 
echo to the sales terminal (step 203B) and awaits a pre- 
scribed interval to check for the reception of an SID 
so again (step 203C) to repeat the transmission of an SID 
echo if an SID is received again. During TID reception 
subroutine 204, the payee terminal receives a transac- 
tion terminal identifier (step 204A), returns a TID echo 
to the sales terminal (step 204B) and awaits a pre- 
ss scribed interval to check for the reception of a TID again 
(step 204C) to repeat the transmission of a TID echo if 
a TID is received again. 

[0038] Payee temiinal 22 then saves aJI the informa- 
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tion received from the sales terminal 21 in memory (step 
205) and displays the saved information on a display 
panel to be confirmed by the purchaser (step 206). 
When the purchaser confirms that the displayed infor- 
mation is correct, he enters a password to the payee 
terminal 22. 

[0039] In Fig. 5B, when a password is entered (step 
207), the payee terminal checks to see if it matches the 
one that is stored in the payee terminal. If the entered 
password is not correct, control branches out to step 230 
to determine whether the transaction is to be interrupt- 
ed. If not, flow returns to step 207 to allow the purchaser 
to re-enter a password. If the transaction is to be inter- 
rupted, the payee terminal proceeds to step 231 to de- 
lete the received data and terminates the session to the 
sales terminal (step 232) and proceeds to the end of the 
routine. 

[0040] If the entered password is correct, flow pro- 
ceeds from decision step 208 to PID transmission sub- 
routine 209 to transmit the payee-terminal identifier to 
the sales terminal 21 and then terminates the session 
with the sales terminal (step 210). 
[0041 ] At step 211, the payee terminal 22 attempts to 
establish a wireless link to the mobile network 24 using 
a first network resource (or frequency) and checks to 
see if a communication channel is available. If the deci- 
sion at step 211 is negative, flow proceeds to step 212 
to make a second attempt to establish a wireless link to 
the mobile network 24 using a second frequency and 
checks to see if a communication channel is available. 
If the second attempt fails, the payee terminal proceeds 
to the end of the routine. If either of these attempts is 
successful, the payee terminal proceeds to step 213 to 
establish a connection to the settlement center 20 via 
the mobile network 24 and PSTN 23 and starts a session 
with the center 20. Payee terminal 22 successively per- 
forms transmission subroutines 214, 215, 216, 217 and 
218 to transmit the payee-terminal identifier, password, 
SID, TID and payment data to the center 20 (Fig. 5C). 
[0042] If the settlement center 20 authenticates the 
payee terminal, it sends a settlement complete mes- 
sage to both terminals. 

[0043] When the payee terminal 22 receives this set- 
tlement complete message (step 219), it releases the 
connection to the settlement center (step 221) and re- 
starts a session with the sales terminal 21 (step 221). If 
the sales terminal has received the same settlement 
complete message from the center 20, the payee termi- 
nal will receive a message identifier (MID) from the sales 
terminal during MID reception subroutine 222. During 
this subroutine, the payee terminal sends an MID echo 
back to the sales terminal to ensure correspondence. At 
step 223, the payee terminal terminates the session with 
the sales terminal. 

[0044] The operation of the settlement center 20 will 
be described with reference to Figs. 6A, 6B and 6C. 
[0045] When the settlement center 20 begins a ses- 
sion with the sales terminal 21 (step 301 , Fig. 6A), it suc- 



cessively performs data reception subroutines 302, 303 , 
304 and 305 for receiving the SID, TID, PID and pay- 
ment data of the sales terminal and saves the received 
data in memory (step 306). The Likewise, when the set- 

5 tlement center 20 begins a session with the payee ter- 
minal 22 (step 401, Fig. 6B), it successively performs 
data reception subroutines 402, 403, 404, 405 and 406 
for receiving the PID, password, SID, TID and payment 
data of the payee terminal and saves the received data 

10 in memory (step 407). 

[0046] In Fig. 6C, the settlement center 20 compares 
the TID, PID and payment data of the sales terminal with 
those of the payee terminal for coincidence (step 501). 
If they match (step 502), flow branches to step 503 to 

is make a search through the password-PID mapping ta- 
ble 26 for a password-PID combination that corre- 
sponds to the received combination of password and 
PID. If there is one (step 504), the settlement center au- 
thenticates the payee terminal and proceeds to step 505 

20 to settle the payment by transfer from the purchaser's 
bank account to the merchants bank account. At step 
506, the center 20 transmits a settlement complete mes- 
sage (SCM) to the sales and payee terminals and ter- 
minates the sessions with both terminals (step 508). If 

25 the decision at step 502 or 504 is negative, flow branch- 
es out to step 507 to send a reject message tq the sales 
and payee terminals and terminates the sessions (step 
508). 

[0047] Fig. 7 is a flowchart of a preferred embodiment 
30 of the present invention in which the settlement center 
20 receives a phone number from the payee terminal at 
step 601 following PID reception subroutine 402 (Fig. 
6B) and makes a search through the PN-PID mapping 
table 26 for a phone number-PID combination corre- 
35 sponding to the combination of the received phone 
number and the PID information (step 602). If there is 
one (step 603), control proceeds to password reception 
subroutine 403. If the decision is negative at step 603, 
the settlement center sends a reject message to both 
40 terminals and terminates the sessions with them (step 
604). 



45 
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Claims 

1 . An electronic settlement system comprising: 
a sales terminal; 

a payee terminal for establishing a local link to 
said sales terminal; and 
a settlement center, 

said sales terminal transmitting settlement in- 
formation including payment data to the payee 
terminal via said local link, and establishing a 
first communication channel to the settlement 
center in response to receipt of an identifier 
identifying the payee terminal and transmitting 
a first signal containing the settlement informa- 
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tion and said identifier to the settlement center; \ 
said payee terminal transmitting said identifier 
to the sales terminal via said local link when a , 
password is entered to the payee terminal after 
the payee terminal has received said settle- *5 
ment information, establishing a second com- 
munication channel to the settlement center 
and transmitting said password and a second < 
signal containing the settlement information 
and said identifier to the settlement center; and , to 
said settlement center performing a settlement 
process if said password is a registered pass- 
word and the first and second signals are iden- 
tical to each other. 

. -.. is 

The electronic settlement system of claim 1, where- 
in said payee terminal is a wireless personal com- 
munication device for establishing said second 
communication channel via a mobile communicar 
tion network. 20 

The electronic settlement system of claim 2, where- 
in said wireless personal communication device is 
a digital cellular mobile telephone. 

• ; • • •■• - ... . . 25 

The electronic settlement system of claim 2, where^ 
in said wireless personal communication device is 
configured to establish an alternate communication 
channel if an attempt to establish said second conv- 
munication channel fails. * ; .30 

The electronic settlement system of claim 1 , wherer 
in said settlement center is configured to transmit a 
message to said sales terminal and said payee ter- 
minal when said settlement process is completed, .: 35 
and wherein said settlement terminal is configured 
to transmit a signal to said payment terminal indi- • , 
eating that the sales terminal has received said 
message. 

• 40 

The electronic settlement system of claim 1, where- :. v 
in said settlement information includes an identifier > 
identifying the sales terminal and an identifier iden- 
tifying a transaction between said, sales terminal 
and said payee terminal. 45 

The electronic settlement system of claim 1 , 

wherein said payee terminal is configured to 
transmit a phone number to said settlement so 
center, and 

wherein said settlement center includes a map- 
ping table for mapping a plurality of phone num- 
bers and a plurality of identifiers identifying dif- 
ferent payee terminals, 55 
wherein said settlement center is configured to 
make a search through said mapping table for 
a phone number mapped to the identifier of said 



payee terminal and perform said settlement 
process if the mapped phone number is detect 
ed in said mapping table. 

8. The electronic settlement system of claim 1 . where- 
in said sales terminal and said payee terminal are 
configured to exchange an original signal and a rep- 
lica of the original signal until the original signal and 
the replica are determined to be equal to each other. 

9. The electronic settlement system of claim 1 , where- 
in said settlement center is configured to transmit a 
replica of an original signal to each of said sales and 
payee terminals until the original signal and the rep- 
lica are determined to be equal to each other. 

10. A settlement method for a system comprised of a 
sales terminal, a payee terminal and a settlement 
center, comprising the steps of: 

a) establishing a local link between the sales 
terminal and the payee terminal; 

b) transmitting settlement information including 
payment data from the sales terminal to the 
payee terminal via said local link; 

c) transmitting an identifier identifying the pavr 
ee terminal from the payee terminal to the sales 
terminal via said local link when a password is 
entered to the payee terminal after the payee 
terminal has received said settlement informa- 
tion; 

d) establishing a first communication channel 
from the sales terminal to the settlement center 
in response to receipt of said identifier and 
transmitting a first signal containing the settle- 
ment information and said identifier to the set- 
tlement center; 

e) establishing a second communication chan- 
nel from the payee terminal to the settlement 
center in response to entry of said password 
and transmitting said password and a second 
signal containing the settlement information 
and said identifier to the settlement center; and 

f) receiving, at said settlement center, said first 
signal from the sales terminal and said pass- 
word and said second signal from the payee 
terminal, and performing a settlement process 
if said password is a registered password and 
the first and second signals are identical to 
each other. 

11. The settlement method of claim 10, wherein said 
settlement center is configured to transmit a mes- 
sage to said sales terminal and said payee terminal 
when said settlement process is completed, and 
wherein said settlement terminal is configured to 
transmit a signal to said payment terminal indicating 
that the sales terminal has received said message. 
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12. The settlement method of claim 10, wherein said 
settlement information includes an identifier identi- 
fying the sales terminal and an identifier identifying 
a transaction between said sates terminal and said 
payee terminal. 

13. The settlement method of claim 10, wherein said 
settlement center includes a mapping table for map- 
ping a plurality of phone numbers and a plurality of 
identifiers identifying different payee terminals, 
wherein step (e) further comprises the step of: 

transmitting a phone number from the payee 
terminal to said settlement center, and 
wherein step (f) further comprises the step of: 
making a search through said mapping table for 
a phone number mapped to the identifier of said 
payee terminal, and 

performing said settlement process if the 
mapped phone number is detected in said map- 
ping table. 

14. The settlement method of claim 10, wherein step 

(b) comprises receiving a replica of an original sig- 
nal sent from the sales terminal to the payee termi- 
nal and retransmitting a copy of the original signal 
to the payee terminal until the original signal and 
the replica are determined to be equal to each other. 

15. The settlement method of claim 10, wherein step 

(c) comprises receiving a replica of said identifier 
sent from the payee terminal to the sales terminal 
and retransmitting a copy of the identifier to the 
sales terminal until the identifier and the replica are 
determined to be equal to each other. 

16. The settlement method of claim 1 0, wherein step (0 
comprises the steps of: 

transmitting a replica of said first signal sent 
from the sales terminal to the settlement center; 
retransmitting a copy of the first signal to the 
sales terminal until the first signal and the rep- 
lica are determined to be equal to each other; 
transmitting a replica of said second signal sent 
from the payee terminal to the settlement cent- 
er; 

retransmitting a copy of the second signal to the 
payee terminal until the second signal and the 
replica are determined to be equal to each oth- 
er. 

17. A payee terminal for an electronic settlement sys- 
tem, wherein the system includes a sales terminal 
and a settlement center, wherein the sales terminal 
transmits settlement information including payment 
data to the payee terminal via a local link, and es- 
tablishes a first communication channel to the set- 
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tlement center in response to receipt of an identifier 
identifying the payee terminal and transmits a first 
signal containing the settlement information and 
said identifier to the settlement center, and wherein 
said settlement center performs a settlement proc- 
ess if a password received from the payee terminal 
is a registered password and the first signal from 
said sales terminal is identical to a second signal 
from said payee terminal, the payee terminal com- 
prising the functions of: 

establishing said local link to said sales termi- 
r nal, 

transmitting said identifier to the sales terminal 
via said local link when said password is en- 
tered to the payee terminal after the payee ter- 
minal has received said settlement information 
from the sales terminal and 
establishing a second communication channel 
to the settlement center and, transmitting said 
password and said second signal containing 
the settlement information and said identifier to 
the settlement center. 



25 1 8. A sales terminal for an electronic settlement system 
wherein the system includes a payee terminal and 
a settlement center, wherein the payee terminal 
transmits an identifier identifying the payee terminal 
when the payee terminal receives settlement infor- 

30 mation including payment data from the sales ter- 
minal via a local link and establishes a communica- 
tion channel to the settlement center in response to 
entry of a password after the payee terminal has 
received said settlement information and transmits 

35 a signal containing the settlement information and 
said identifier to the settlement center, and wherein 
said settlement center performs a settlement proc- 
ess if said password received from the payee ter- 
minal is a registered password and the signal from 

40 said payee terminal is identical to a signal from said 
sales terminal, the sales terminal comprising the 
functions of: 

establishing said local link to said payee termi- 

45 nal, 

transmitting said settlement information to the 
payee terminal via said local link, and 
establishing a communication channel to the 
settlement center in response to receipt of said 

50 identifier from the payee terminal and transmit- 

ting a signal containing the settlement informa- 
tion and said identifier to the settlement center. 

19. A settlement center for an electronic settlement sys- 
55 tern wherein the system includes a sales terminal 
and a payee terminal, wherein the sales terminal 
transmits settlement information including payment 
data to the payee terminal via a local link, and es- 
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tablishes a first communication channel to the set- 
tlement center in response to receipt of an identifier 
identifying the payee terminal and transmits a first 
signal containing the settlement information and : 
said identifier to the settlement center, and wherein 5 
the payee terminal transmits said identifier . when - 
the payee terminal receives said settlement, infor^ ... 
mation and establishes;^ second communication :;. 
channel to the settlement center in response to en- : 
try of a password after the payee terminal has re- *o 
ceived said settlement information from the sales 
terminal, and transmits said password and a sec- 
ond signal containing the settlement information 
and said identifier to the settlement center, the set- ; 
tlement center comprising the functions of: *5 . 

receiving the first signal via said first communi- 
cation channel and the second signal via said 
second communication channel; " 
comparing said first signal to said second sig- 20 
nal; and 

performing a settlement process if said pass- 
word is a registered password and the first and 
second signals arc identical to each other. 

•vvZ' : 25 
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